Home/ Questions/Q 8450317
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T10:56:15+00:00

I had the same issue like this guy . Because I am lucky, his

  • 0

I had the same issue like this guy. Because I am lucky, his solution also worked for me.
But I think it’s a bit dirty and I was wondering if there isn’t a better one.

I’ve set up this configuration on IIS, but the cookies will always expire when the user closes her browser (if I don’t use he “cookie hack”)

an image showing my IIS configuration

Any Ideas?

EDIT: To clearify: It not the Server side session that is lost, it’s only the “ASP.NET_SessionId” cookie lifetime, which is incorrect.

EDIT2: After some Research, I was wondering when the ASP.NET_SessionId cookie is actually set. If I delete it (using Firefox) and refreshing the page (even several times) a new one won’t appear … What’s going on here?

EDIT3: I just found out, that the session id cookie will be set if I put something into the session, so that question (EDIT2) is off.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The session cookie will exire as soon as possible for security reasons. One should not extent it’s lifetime due to session hijacking.

    If you need “the old session back”, then use ASP.NET authentication and generate a new session after the users comes back to the site. This will safe memory and also increase overall security.

    • 0